General
- Target test.ps1.ps1
- Size 100B
- Sample260727-by4pgatzbz
- SHA256 74400ffa8770b577d9b57e4492ce94ea5c886ac2e73bd09dbc63c2e338bae2ca
- MD5 0d66bca1506c6386972956423942e861
- SHA1 4c2f753d217dfa2cae42845624b49457e7c3ccd3
- SHA512 845e3312472b80e9dd4aa220c7928c5287afeda2922b2ea03cdff9b942f99cf768f248f65cba353a45086e40562d1db2f5881cde3f8c5b94d5fbd739f464080f
- TLSH T1CBB01295DC5403E54A85105583676E50C5B3B0800992A9F47F4123CF1E72E30D90D45C
- MD5 SHA1 SHA512 TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
test.ps1
Resource
win11-20260513-en
7 signatures
900 seconds
Malware Config
Targets
-
- Target test.ps1.ps1
- Size 100B
- SHA256 74400ffa8770b577d9b57e4492ce94ea5c886ac2e73bd09dbc63c2e338bae2ca
- MD5 0d66bca1506c6386972956423942e861
- SHA1 4c2f753d217dfa2cae42845624b49457e7c3ccd3
- SHA512 845e3312472b80e9dd4aa220c7928c5287afeda2922b2ea03cdff9b942f99cf768f248f65cba353a45086e40562d1db2f5881cde3f8c5b94d5fbd739f464080f
- TLSH T1CBB01295DC5403E54A85105583676E50C5B3B0800992A9F47F4123CF1E72E30D90D45C
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Drops file in Drivers directory
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.